Currently `package-lock.json` is in `.gitignore` so not committed to the repo. However, it should be committed to the repo as the npm help [doc](https://docs.npmjs.com/cli/v11/configuring-npm/package-lock-json) suggests: > This file is intended to be committed into source repositories, and serves various purposes.